Pre-Alpha:
TSOClient.exe modifications:
offset 0x1855: Replace "0d 02 0f 00 00" with "0d 01 0f 00 00".
offset 0x1fd11: Replace "74 17" with "eb 17".

---
Play Test Rating Pending:
TSOClient.exe modifications:
TSOClient_base+0x18e2: Replace "0d 02 0f 00 00" with "0d 03 0f 00 00".
TSOClient_base+0x14bfe: Replace "24 01" with "24 00".
TSOClient_base+0x14ca0: Replace "74 17" with "EB 17".
TSOClient_base+0x14d54: Replace "74 17" with "EB 17".

TSOServiceClientD.dll:
TSOServiceClientD_base+0x716a: Replace "74 07" with "EB 07".

TSONetServiceSimClientD.dll:
TSONetServiceSimClientD_base+0x846e: Replace "74 16" with "EB 48".

---
Charter Edition:
TSOClient.exe modifications:
TSOClient_base+0x18e2: Replace "0d 02 0f 00 00" with "0d 01 0f 00 00".
TSOClient_base+0x14d97: Replace "24 01" with "24 00". (Client version: 0x69F73071, Server version: 0x3CE053BE)
TSOClient_base+0x14e39: Replace "74 17" with "EB 17". (Client version: 0x9CD72899, Server version: 0x69BD4A73)
TSOClient_base+0x14eed: Replace "74 17" with "EB 17". (Client version: 0xE976553D, Server version: 0xE976553E)

TSOSimulatorClientD.dll modifications:
TSOSimulatorClientD_base+0x1dd50: Replace "74 65" with "EB 65" (Client version: 0x8B32DD38, Server version: 0x2B32DCDE)

TSOServiceClientD.dll moditifcations:
TSOServiceClientD_base+0xb50a: Replace "74 07" with "EB 07" (deals with "tuning.ini")

3CE053BE+2D16DCB3= 69F73071

---
New & Improved trial:
TSOClient.exe modifications:
Offset 0x18d2: Replace "0d 02 0f 00 00" with "0d 01 0f 00 00".
Offset 0x1481b: Replace "24 01" with "24 00".
Offset 0x148d6: Replace "74 17" with "EB 17".
Offset 0x1498e: Replace "74 17" with "EB 17".

TSOPersistD.dll modifications:
TSOPersistD_base+0x17219: Replace "75 4C" with "EB 4C". (This change causes HouseSimServer to read from the .spf files.)

TSOSimulatorClientD.dll modifications:
TSOSimulatorClientD_base+0x1dd50: Replace "74 65" with "EB 65".
TSOSimulatorClientD_base+0x1929b: Replace "A8 02" with "0C 02". (This change causes HouseSimServer to read from the DSOB HouseData chunk.)
TSOSimulatorClientD_base+0x1ddc6: Replace "A8 02" with "0C 02". (This change causes HouseSimServer to create an object with clsid=8B32DD38, iid=EB32DCAC.)
TSOSimulatorClientD_base+0x6d8f1: Replace "A8 02" with "0C 02". (This change causes HouseSimServer to read an extra short field in HouseData, allowing TSO-SE to send the same HouseData to both HouseSimServer and the client, for convenience.)

TSOServiceClientD.dll modifications:
TSOServiceClientD_base+0xb50a: Replace "74 07" with "EB 07".
TSOServiceClientD_base+0x3a43d: Replace "74 77" with "74 2B".

TSONetServiceSimClientD.dll modifications:
TSONetServiceSimClientD_base+0xde00: Replace "B8 02 00 00 00" with "B8 03 0f 00 00". (This is required for the conditional jump at TSONetServiceSimClientD_base+0x71fed to not be taken.)
TSONetServiceSimClientD_base+0x65d3e: Replace "8B 46 E8 8D 4E E8 6A 00 52 8B 54 24 10 52 FF 50 3C 5E C2 08 00" with "8B 06 89 F1 90 90 90 90 90 8B 54 E4 08 52 FF 50 40 5E C2 08 00". This causes the 0xACDC4FF2 handler to send two cTSONetMessagePDUs (JoinHouseResponse and HouseData) with Flags=0x00000001, RecipientAvatarID=<value from Data1>.

TSOViewerClientD.dll modifications:
...

mov eax, dword [esi-18]
lea ecx, [esi-18]
push 0
push edx
mov edx, dword [esp+10]
push edx
call dword [eax+3c]
pop esi
ret 8

to:

mov eax, dword [esi]
mov ecx, esi
push edx
push 1
push esp
push dword [esp+14]
call dword [eax+18]
pop ecx
pop ecx
pop esi
ret 8